CVE-2026-5673: Out-of-bounds Read

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI Audio Video Interleave parser, specifically in the aviparseinputfile function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a...

CVE-2025-70299

Removed by vendor...

CVE-2025-70299: Heap-based Buffer Overflow

A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

CVE-2025-70299

A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

Heap Buffer Overflow

libgpac.so is vulnerable for Heap Buffer Overflow. The vulnerability is due to the lack of validation for the ‘bih.bisize’ variable when copying a block of memory into ‘AVI-bitmapinfoheader’ within the ‘aviparseinputfile’ function located in the ‘src/mediatools/avilib.c’ file...

heap-buffer-overflow in function avi_parse_input_file media_tools/avilib.c:2083

Description Heap-buffer-overflow in MP4Box. Version $ ./bin/gcc/MP4Box -version MP4Box - GPAC version 2.3-DEV-revrelease c 2000-2023 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Please cite our work in your research: GPAC Filters: https://doi.org/10.1145/3339825.3394929 GPAC:...